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METHOD FOR MANAGING AN UNCORRECTABLE, UNRECOVERABLE 
DATA ERROR (UE) AS THE UE PASSES THROUGH A PLURALITY OF DEVICES 
IN A CENTRAL ELECTRONICS COMPLEX 

CROSS-REFERENCE TO RELATED APPLICATION 

The present application is related to co-pending application, Serial No. (AUS9-2001- 

01 14US1/2065P) filed (date), entitled "Method and System for 

Fault Isolation Methodology for I/O Unrecoverable Uncorrectable Error, " and assigned to IBM 
Corporation, Armonk, New York, 

FIELD OF THE INVENTION 

The present invention relates generally to processing systems and more particularly to a fault 
isolation methodology related to such systems. 

BACKGROUND OF THE INVENTION 

Conventional computing systems crash when they encounter uncorrectable/unrecoverable 
data errors (UEs). The impact to the owner of the system can range from minor nuisance to severe 
monetary business losses. Accordingly, a system owner is adversely affected by such system crashes 
and becomes very dissatisfied by these UEs. Methods to avoid such crashes have both tangible and 
intangible benefits. 

On a conventional multiprocessing computing system platform which includes a service 
processor, an error classification and processing model is provided whereby the hardware within the 
central electronic complex notifies a service processor (SP) of conditions requiring processing. An 
attention signal is provided that informs the SP that such a condition has occurred. The hardware 
has functions that capture and inform the SP of the type of condition that has occurred. In the 
conventional system there are three (3) possible hardware detected error types: 
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1 . Recovered Error Attention (REA): A hardware detected error condition which 
hardware itself recovered from. 

2. Special Attention (SA): A hardware detected condition (not necessarily an error) that 
requires specific unique SP processing actions. 

3 . Checkstop Attention (CS A): A hardware detected error condition for which the 
hardware caused the system to cease operating (i.e., system crashes). 

In this model a given fault or attention condition was designed to be detected and reported 
from one and only one logical fault source point. A UE in this model was reported as a CSA thereby 
causing the system hardware to crash immediately. Accordingly, it is desirable to find ways to keep 
systems functioning as well as possible when UE conditions are encountered. It is also desirable to 
provide correct fault isolation in a computer system that continues to function while such systems 
pass the "data with error" through multiple system components on the way to their data destination 
with various repercussions at each observation point. The present invention addresses such a need. 

SUMMARY OF THE INVENTION 

A method and system for managing uncorrectable data error (UE) conditions as the UE 
passes through a plurality of devices in a central electronic complex (CEC) is disclosed. The 
method and system comprises detecting a UE-RE by at least one device in the CEC; and providing 
an attention signal by at least one device to a diagnostic system to indicate the UE-RE condition. 
The method and system further includes analyzing the UE-RE attention signal by the diagnostic 
system to produce an error log with a list of failing parts and a record of the log. 

A method and system in accordance with the present invention provides a new fault isolation 
methodology and algorithm, which extends the current capability of a service processor runtime 
diagnostic code (PRD). The method and system in accordance with the present invention allows for 
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correct error isolation and for surfacing of appropriate service action messages on a processing, 
system that has successfully recovered from an uncorrectable data error (UE) condition. The method 
allows for the accurate determination of an error source and provides appropriate service action if 
and when the system fails to recover from the UE condition. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a simple block diagram of the main components for a central electronic complex. 

Figure 2 illustrates a service processor, which has a JTAG interface device therewith which 
communicates with the various components of the CEC. 

Figure 3 illustrates an example of a flow chart of an uncorrectable data error (UE) condition 
on data coming from the memory. 

Figure 4 is a flow chart illustrating how the PRE) acts on each reported instance of a UE-RE 
condition. 

Figure 5 is a flow chart illustrating how the PRD acts on a reported instance of an SUE-CS 
condition. 

Figure 6 is a flow chart illustrating the operation of the PRD when the UE-RE condition and 
the subsequent SUE-CS condition are processed either consecutively or at the same time. 

Figure 7 is a flow chart illustrating the example where an I/O hub device connected to the 
CPU/bus controller requests data from memory and the memory controller observes an uncorrectable 
data error on data coming out of memory. 

DETAILED DESCRIPTION 

The present invention relates generally to processing systems and more particularly to a fault 
isolation methodology related to such systems. The following description is presented to enable one 
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of ordinary skill in the art to make and use the invention and is provided in the context of a patent 
application and its requirements. Various modifications to the preferred embodiment and the generic 
principles and features described herein will be readily apparent to those skilled in the art. Thus, the 
present invention is not intended to be limited to the embodiment shown but is to be accorded the 
widest scope consistent with the principles and features described herein. 

A method and system in accordance with the present invention allows for managing 
uncorrectable data errors (UE) as they pass through various points within a computing system from 
source to destination. The method and system in accordance with the present invention allows for 
isolation of the error types identified below. 

a. Recovered Error Attention (REA): A hardware detected error condition which the 
hardware itself recovered from. 

b. Special Attention (SA): A hardware detected condition (not necessarily an error) that 
requires specific unique SP processing actions, 

c. Checkstop Attention (CSA): A hardware detected error condition for which the 
hardware caused the system to cease operating (i.e., system crashes). 

d. UE-RE: This is attention type raised at the initial detection point of uncorrectable 
data error. It is closest to actual physical source of error. 

e. SUE (Special Uncorrectable Error)-Mask: This category is not a true attention but 
rather an observation of uncorrectable data passing a point (on the path from source to destination) 
which had been detected and reported closer to the data source and then marked as an SUE and 
passed along to this observation point. The reason for a mask here is that the error does not 
necessarily need to be (redundantly) reported from a particular observation point. 

f. SUE-Interrupt: This category is not a true attention to SP but rather an interrupt to 
the system processor generated in the event the passed error data gets used. This is a hardware 
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mechanism used to invoke system error handling code. 

g. SUE-CS: This is an attention to SP which signifies that a particular SUE condition 
has been detected from which system recovery is not feasible. 

The new error conditions (UE-RE, SUE-mask, SUE-Interrupt and SUE-CS) allow fault 
isolation of detected UE conditions and provide the system with an opportunity to continue 
operations without crashing.. The SP's runtime diagnostic code (known as PRD) processes all of the 
above seven conditions except the SUE-Interrupt. To describe the features of the invention in more 
detail refer now to the following description in conjunction with the accompanying figures. 

Figure 1 is a simple block diagram of the main components for a central electronic complex 
(CEC) 10. Solid lines indicate entities and connections within the central electronics complex. 
Dotted lines indicate remote entities and connections between them and to the CEC 1 0. A system 
and method in accordance with the present invention can be utilized with many types of CEC 
structures. The structures can be simpler than those which are shown in Figure 1 or the structures 
can be more complex. An example of a simple structure could be removing the CPU/bus controller 
18, I/O hub 22, L3 cache/controller 26, memory controller 30 and memory card 34 and providing a 
link to a simple "pass through" connecting component between and connected to both CPU/bus 
controller 1 6 and to CPU/bus controller 18'. An example of a more complex structure would consist 
of providing multiple replicates of CEC devices shown in Figure 1 with the CPU/Bus Controller 
units in each replicate interconnected with the respective CPU/Bus controller in other replicates. All 
such configurations are single processing systems which can operate as a single operating system 
image or as a logically partitioned multiple OS image complex. 

Furthermore, although this embodiment of a CEC 10 illustrates one of the possible CEC 
configurations, one of ordinary skill in the art recognizes that any number of CEC configurations 
could be utilized therewithin and that would be within the spirit and scope of the present invention. 
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Each of the CPU/ bus controllers 16, 18 5 18' and 16' are connected in communication with 
their own I/O hubs 20, 22, 22' and 20' respectively. Furthermore, each CPU/ bus controller 16, 18, 
18' and 16' is in communication with their respective L3 cache/controllers 24, 26, 26' and 24'. The 
L3 cache/controllers 24, 26, 26' and 24' in turn are in communication with their respective memory 
controllers 28, 30, 30' and 28\ The memory controllers 28, 30, 30' and 28' are in turn in 
communication with memory cards 32, 34, 34' and 32'. The I/O hubs 20, 22, 22' and 20' are also in 
communication with I/O bridge devices 36, 38, 38' and 36' and I/O devices 40, 42, 42' and 40' 
which are shown with dotted lines to indicate that they are not part of the overall CEC 10. Each of 
the devices within the CEC includes a JTAG connection indicated by the letter "J" to a service 
processor (not shown). 

Figure 2 illustrates a service processor 50, which has a JTAG interface device 52 therewith 
which communicates with the various components of the CEC 10. Each of the devices within the 
CEC 10 includes an attention line to alert the service processor 50 to a condition requiring service 
processor action. The attention handler 60 and service processor runtime diagnostics (PRD) 62 
related to that attention handler are firmware components that run on the service processor's 
microprocessor 56. 

A method and system in accordance with the present invention provides a new fault isolation 
methodology and algorithm, which extends the current capability of the PRD 62. The method and 
system in accordance with the present invention allows for correct error isolation and for surfacing of 
appropriate service action messages on a processing system that has successfully recovered from a 
UE condition. The method allows for the accurate determination of an error source and provides 
appropriate service action if and when the system fails to recover from the UE condition. To 
describe the features of the present invention in more detail refer now to the following description in 
conjunction with the accompanying figures. 
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Figure 3 illustrates an example of a flow chart of an uncorrectable data error (UE) condition 
on data coming from memory 34. In this example, the CPU/bus controller 1 8 requests data from 
memory 34 and the Memory Controller 30 observes a UE-RE on data coming from the memory 34. 
The CPU/bus controller 16 and the L3 cache/controller 26 both provide an SUE-mask condition 
which is not reported because they are merely observing the condition. 

The CPU/bus controller 18 (which requested the data) signals an interrupt upon its first 
attempt to use the incoming SUE condition tagged data. It is the responsibility of a system's 
firmware machine check interrupt handler (not shown) to process that interrupt. 
In the course of processing this interrupt, the CPU/bus controller 1 8 may encounter another instance 
of a special uncorrectable error (SUE) data condition which occurred after the SUE condition 
currently being processed, which will cause the CPU/bus controller 18 to invoke a system checkstop 
mechanism (not shown) and will cause the CPU/bus controller 18 to assert a SUE-CS attention to 
signal the service processor runtime diagnostic code (PRD) 62 to process the error appropriately. In 
this example, data with error flows in the system, the data is classified at various observation points 
as it flows through the system, and in two places (the memory controller 30 and the CPU/bus 
controller 18) an attention signal is asserted to the service processor. The PRD 62 acts on these 
attention signals. 

Figure 4 is a flow chart illustrating how the PRD 62 acts on each reported instance of a UE- 
RE condition. As is seen, the memory controller 30 detects a UE condition and provides an attention 
signal (UE-RE), via step 202. The attention handler determines that there is a need to call the PRD 
62, via step 204. Finally, the PRD 62 analyzes the UE-RE attention signal and produces an error log 
with a list of failing parts and a record for diagnosing any later SUE-CS condition that may occur, 
via step 206. 

The PRD 62 provides two significant advantages over conventional PRD processing. The 
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first advantage is that using conventional PRD processing, the initial detection of a UE condition 
would have crashed the system. Secondly, the PRD 62 would not have had any reason to make a 
special record of the error for purposes of a subsequent SUE-CS condition because the system had 
crashed. 

The system can usually recover from the UE-RE condition without experiencing a SUE-CS 
condition. Such recovery comes by virtue of the CPU/bus controller 18 not trying to utilize the 
corrupted data, or by virtue of the system's firmware machine check interrupt handler (not shown) 
being able to complete its error processing of initial error condition before the CPU/bus controller 
18's hardware experiences another incoming SUE condition. If such a subsequent SUE condition 
comes in while such a recovery is being attempted, an SUE-CS attention signal will be asserted by 
the CPU/bus controller 18 device and the system will crash. 

The PRD 62 gets called to process this error case as illustrated in Figure 5. As is seen, the 
CPU/bus controller 18 detects an SUE condition and provides an SUE-CS attention signal, via step 
302. The attention handler determines that there is a need to call the PRD 62, via step 304. Finally, 
the PRD 62 analyzes the SUE-CS attention signal and produces an error log with a list of failing 
parts, via step 306. 

The flow chart of Figure 5 seems nearly identical to that of Figure 4. There is an important 
difference in the detection of a SUE-CS condition as opposed to the detection of a UE-RE condition, 
however. A UE-RE condition is detected at and reported by the CEC device (e.g., the memory 
controller in the above example) which first observes the error. That device is capable of capturing 
sufficient data for the PRD 62 to determine source of error because it is the first device that 
encounters the UE condition. 

A SUE-CS condition, on the other hand, is detected and reported by a CEC device which can 
be far removed both physically and in terms of time from the actual source of the error. In general, 
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such a device is not capable of capturing the error details necessary for the PRD 62 to determine 
cause. In some cases, a SUE-CS condition also can occur so quickly that there is insufficient time 
for the PRD 62 to process the prior UE-RE condition before the SUE-CS attention occurs. 
Accordingly, the PRD 62 handles these cases by processing the UE-RE condition at the same time as 
the subsequent SUE-CS, 

Figure 6 is a flow chart illustrating the operation of the PRD 62 when the UE-RE condition 
and the subsequent SUE-CS condition are processed either consecutively or at the same time. 
Referring now to Figure 6, after the PRD-62 has been initiated via step 402, it is determined if a UE- 
RE condition is present alone, via step 404. That is determined if a UE-RE condition is present and 
no SUE-CS has occurred. If this condition is satisfied, a UE-RE record is created, via step 406. If, 
on the other hand, this condition has not been satisfied, then it is determined if a SUE-CS condition 
is detected, via step 408. If a SUE-CS condition is not detected, then an existing error analysis is 
performed, via step 410. 

On the other hand, if a SUE-CS condition is detected, it is then determined whether a 
previous UE-RE is either recorded or isolated in a hardware CEC device, via step 412. If the answer 
is yes, then a log is produced in the PRD-62 and a narrow failing part list is produced based on the 
UE-RE information, via step 414. If there is no previous UE-RE condition, then a log is produced 
and a broad failing parts list is produced based on there being no UE-RE information, via step 416. 

Figure 7 is a flow chart illustrating the example where an I/O Hub device 22 connected to the 
CPU/bus controller 18 requests data from memory and the Memory Controller 30 observes a UE 
condition on data coming out of memory 34. 

As illustrated by the Figure, control into and within the PRD 62 works the same for this 
example as for the above-identified example. This example, therefore, illustrates the versatility of 
the PRD 62 to handle all "UE error source destination" for the data paths contained within the CEC 
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10. 

Variations of the above examples are possible and handled in the same fashion. They all 
have two common characteristics. The first common characteristic is that the original uncorrectable 
data error begins at some point where a CEC device detects and reports the UE-RE attention signal. 
This detection point can be in any memory controller device, any cache controller device, any 
CPU/Bus Controller, and any I/O Hub. The second common characteristic is that either (a) a CPU 
(can be any one of them) tries to use that error data, or (b) an attempt is made to route that data out to 
the I/O through any I/O Hub. Case (b) always leads to a SUE-CS condition, while case (a) may or 
may not lead to an SUE-CS condition as described previously. 

Accordingly, a method and system in accordance with the present invention provides a 
methodology which extends the current capability of the PRD. The method and system in 
accordance with the present invention provides for correctly isolating UEs and providing appropriate 
service action messages on the system that has successfully recovered from the UE conditions. The 
method and system therefore allows for the accurate determination of an error source and the 
appropriate service action whether or not the system fails to recover from a particular UE condition. 
Accordingly, the PRD always determines the source of error if the error is based on an UE-RE even 
when the system continues to operate. If a SUE-CS occurs, the PRD will still correctly resolve the 
cause of the fault. 

Although the present invention has been described in accordance with the embodiments 
shown, one of ordinary skill in the art will readily recognize that there could be variations to the 
embodiments and those variations would be within the spirit and scope of the present invention. 
Accordingly, many modifications may be made by one of ordinary skill in the art without departing 
from the spirit and scope of the appended claims. 



